Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/0db348-8ca8-40de-82cd-29f20dc8eaf4/1/inuFwxZYaxmdJr_Ej-JZiTnLb94.mft
File: inuFwxZYaxmdJr_Ej-JZiTnLb94.mft (raw, json)
Hash identifier: nNm/vLeJL9KWuADVp/1WYW2DgSDbj7qDluqiu8XLuw8=
Subject key identifier: 28:D4:0C:78:CB:62:F0:F3:12:5E:97:18:57:6B:90:61:10:03:5A:CC
Authority key identifier: 8A:7B:85:C3:16:58:6B:19:9D:26:BF:C4:8F:E2:59:89:39:CB:6F:DE
Certificate issuer: /CN=8a7b85c316586b199d26bfc48fe2598939cb6fde
Certificate serial: 019CAD908633D83F1C4B97D29A1FB3E9F8D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/inuFwxZYaxmdJr_Ej-JZiTnLb94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/0db348-8ca8-40de-82cd-29f20dc8eaf4/1/inuFwxZYaxmdJr_Ej-JZiTnLb94.mft
Manifest number: 1847
Signing time: Mon 02 Mar 2026 08:00:55 +0000
Manifest this update: Mon 02 Mar 2026 08:00:55 +0000
Manifest next update: Tue 03 Mar 2026 08:00:55 +0000
Files and hashes: 1: b2w6O9WirtRCdzK66va1rPliDCM.roa (hash: stbRk0sxdQicjLZT3kCAibpOrHEkv6FoTLisoOLFpLg=)
2: inuFwxZYaxmdJr_Ej-JZiTnLb94.crl (hash: fHPICsURXI8e3FTOT8DqmSRIAiYfXh9flrP8NEeiGms=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/0db348-8ca8-40de-82cd-29f20dc8eaf4/1/inuFwxZYaxmdJr_Ej-JZiTnLb94.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/0db348-8ca8-40de-82cd-29f20dc8eaf4/1/inuFwxZYaxmdJr_Ej-JZiTnLb94.mft
rsync://rpki.ripe.net/repository/DEFAULT/inuFwxZYaxmdJr_Ej-JZiTnLb94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:90:86:33:d8:3f:1c:4b:97:d2:9a:1f:b3:e9:f8:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a7b85c316586b199d26bfc48fe2598939cb6fde
Validity
Not Before: Mar 2 08:00:55 2026 GMT
Not After : Mar 3 08:00:55 2026 GMT
Subject: CN=28d40c78cb62f0f3125e9718576b906110035acc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:db:47:01:ab:64:66:37:9a:9d:94:e1:78:73:
81:b6:c6:e5:63:37:01:fd:0b:3e:1e:ad:cd:77:28:
f6:2b:f5:dd:bd:de:30:4b:02:70:ee:48:5a:d0:c2:
0c:d1:1c:5a:c7:78:27:9c:17:0d:5b:68:ea:62:56:
be:1a:57:27:de:aa:13:c9:0c:f0:53:a5:d8:ce:ce:
9e:d2:67:fe:7c:ce:1f:b0:e0:c9:c8:6e:00:bd:86:
4e:86:0d:82:5b:e4:93:0a:d2:62:0d:cc:0d:1a:b2:
3b:56:8d:17:95:b6:43:d7:6b:b0:f4:06:9c:77:8a:
1f:2e:e8:0c:40:6b:d3:87:07:3d:cb:4a:db:24:77:
7c:dc:51:18:92:94:95:68:a6:63:4f:3c:12:4a:46:
dc:6a:86:84:f7:aa:bd:ee:8d:54:6a:0a:2a:7e:e8:
b9:1c:91:13:24:8c:36:21:79:57:23:82:80:c5:34:
33:f0:12:30:43:fc:5f:84:f2:31:0a:b2:be:99:e4:
4b:23:f6:b8:2a:aa:be:d2:1e:a1:d3:d9:c8:07:c9:
82:3d:db:a8:37:f5:2c:24:2a:53:04:11:16:25:78:
f4:f0:bd:e7:0b:ce:ef:ba:2c:26:25:d8:ea:8a:d3:
de:f1:a9:a8:f2:ed:fc:1b:ef:96:a1:86:80:f4:86:
60:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:D4:0C:78:CB:62:F0:F3:12:5E:97:18:57:6B:90:61:10:03:5A:CC
X509v3 Authority Key Identifier:
keyid:8A:7B:85:C3:16:58:6B:19:9D:26:BF:C4:8F:E2:59:89:39:CB:6F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/inuFwxZYaxmdJr_Ej-JZiTnLb94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/0db348-8ca8-40de-82cd-29f20dc8eaf4/1/inuFwxZYaxmdJr_Ej-JZiTnLb94.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/0db348-8ca8-40de-82cd-29f20dc8eaf4/1/inuFwxZYaxmdJr_Ej-JZiTnLb94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:d2:3b:51:41:23:49:65:aa:ca:3c:6f:5f:b3:df:ac:96:4b:
fa:52:8f:ea:1e:31:ba:0b:9f:97:4e:49:ac:3c:7a:ea:6b:dc:
0a:0b:9f:11:78:83:9e:aa:37:1d:3d:07:d4:43:a8:cf:79:9b:
68:58:e4:c7:6d:75:d5:98:6a:23:bd:a1:90:9c:05:31:75:85:
75:43:58:fe:4a:0a:29:1c:7e:77:21:47:49:ff:eb:25:57:08:
7e:77:62:6f:46:c4:28:b7:82:7a:dd:33:7e:36:ce:e6:f9:51:
54:25:d9:1e:05:95:35:e0:ed:4c:f0:f9:3a:eb:92:99:d8:4c:
b1:18:e1:0d:9c:46:0b:3c:48:9a:fc:0a:85:b5:2e:92:b1:1f:
41:17:af:f5:25:36:36:ca:e2:12:b1:c9:35:0f:df:e6:92:b9:
6b:25:d1:31:b6:21:95:92:92:39:b2:e6:d0:52:74:34:68:57:
27:85:da:b6:05:46:dd:3c:a2:04:68:b2:88:e2:fa:b0:9a:72:
32:e3:0a:8f:29:55:cd:62:03:91:91:71:d4:0d:1e:f9:1f:5d:
eb:cd:34:f2:ac:3a:88:6e:ee:e0:db:d5:b5:22:03:2b:e5:e1:
79:31:bc:72:97:83:0d:50:4f:a1:81:be:2e:9e:2a:30:e3:e5:
b5:1a:18:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:52:42 2026 by rpki-client